peekaboo-linux-gnome-wayland-computer-use@1.0.2
CAUTION· static onlyPublisher claims: "See and control GNOME Wayland desktops using gnome-screenshot, ydotool, Window Calls, AT-SPI hybrid element coordinates, and optional GNOME Remote Desktop. T..." Observed in sandbox: static analysis only — behavior not yet observed.
Coverage
Static only; nothing was run yet.The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.
Is [email protected] safe to install?
KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-14 and scored it 61/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Privileged sudo command; Privileged sudo command; Privileged sudo command. Summary: static analysis only — behavior not yet observed.
Behavior trace
Queued for honeypot run · static analysis onlyt+CategoryObserved action
This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
HIGH
Privileged sudo commandSKILL.md:231 · Privileged sudo command — agent may execute with elevated privileges
AST05`sudo systemctl restart gnome-remote-desktop.service`, NLA fails for every client:Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Privileged sudo commandSKILL.md:269 · Privileged sudo command — agent may execute with elevated privileges
AST05…rites no file. A disable/enable cycle is NOT enough — it needs a Shell reload (`sudo systemctl restart gdm3`) to re-arm. If you depend on capture in an automated loo…Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Privileged sudo commandSKILL.md:83 · Privileged sudo command — agent may execute with elevated privileges
AST05sudo apt-get install -y gnome-screenshotFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Privileged sudo commandscripts/check-rdp-server.sh:35 · Privileged sudo command — agent may execute with elevated privileges
AST05sudo timeout "$SECS" journalctl -u gnome-remote-desktop.service -f -n 0 2>&1 \Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedscripts/locate-element.py:168 · Python subprocess execution detected
AST05subprocess.run(["ydotool", *args], env=_env(), check=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.HIGH
Privileged sudo commandSKILL.md:267 · Privileged sudo command — agent may execute with elevated privileges
AST05… to `gnome-screenshot`. - **Reloading the Shell on Wayland = restarting GDM** (`sudo systemctl restart gdm3`). There's no in-place `Alt+F2 r` over SSH. The **live GU…Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Privileged sudo commandscripts/check-rdp-server.sh:26 · Privileged sudo command — agent may execute with elevated privileges
AST05sudo ufw status 2>/dev/null | grep 3389 || echo "(no explicit 3389 ufw rule)"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Privileged sudo commandscripts/check-rdp-server.sh:20 · Privileged sudo command — agent may execute with elevated privileges
AST05sudo grdctl --system status 2>&1 | grep -viE 'TPM' # TPM-fallback line is harmless noiseFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedscripts/screenshot-display.py:100 · Python subprocess execution detected
AST05subprocess.run(["gnome-screenshot", "-f", tmp], env=_env(), check=True, timeout=30)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.HIGH
Privileged sudo commandSKILL.md:87 · Privileged sudo command — agent may execute with elevated privileges
AST05sudo systemctl restart gdm3 # reload the Shell so it discovers the extension (see WARNING below)Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Privileged sudo commandscripts/check-rdp-server.sh:23 · Privileged sudo command — agent may execute with elevated privileges
AST05sudo ss -tlnp 2>/dev/null | grep ':3389' || echo "NO LISTENER on 3389 (service not bound)"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.HIGH
Privileged sudo commandscripts/check-rdp-server.sh:8 · Privileged sudo command — agent may execute with elevated privileges
AST05# Run ON the box (or wrap in ssh). Needs sudo for grdctl --system + journal.Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.Cost to the agent
Instructions loaded
≈4,584 tok
1 file · 9 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.
What would make this Verified
19 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%- Unclaimed publisher≈ +8 on the totalClaim kyzcreig: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
- Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
- Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim kyzcreigPropose a patch to the maintainer